Introducing YetiHunter: An open-source tool to detect and hunt for suspicious activity in Snowflake
Tags
attack-pattern: Data Credentials - T1589.001 Tool - T1588.002 Create Account - T1136
Show in Graph
Common Information
Type Value
UUID 08625de4-e812-43ff-affd-ef011059c488
Fingerprint d219895725366a42
Analysis status DONE
Considered CTI value 1
Text language
Published June 13, 2024, 2:53 p.m.
Added to db Aug. 31, 2024, 1:10 a.m.
Last updated Nov. 17, 2024, 11:40 p.m.
Headline Summary
Title Introducing YetiHunter: An open-source tool to detect and hunt for suspicious activity in Snowflake
Detected Hints/Tags/Attributes 33/1/9
Source URLs
Redirection Url
Details Source https://permiso.io/blog/introducing-yetihunter-an-open-source-tool-to-detect-and-hunt-for-suspicious-activity-in-snowflake
URL Provider
Details Provider Source level domain
Details permiso.io permiso.io
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 193 ✔ Cloud Chronicles https://permiso.io/blog/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 4128 
github.com
Details Domain 1 
yetihunter.py
Details File 144 
requirements.txt
Details File 1 
yetihunter.py
Details File 1 
queries.json
Details File 1 
login_from_malicious_ips.csv
Details Github username 7 
permiso-io-tools
Details Mandiant Uncategorized Groups 31 
UNC5537
Details Url 1 
https://github.com/permiso-io-tools/yetihunter